add variable for ssl_policy TLS listener (#115)

in4it · Mar 21, 2024 · f0b583b · f0b583b
1 parent afbebb8
commit f0b583b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/terraform/alb.tf b/terraform/alb.tf
@@ -65,7 +65,7 @@ resource "aws_alb_listener" "alb-https" {
   load_balancer_arn = aws_alb.alb.arn
   port              = "443"
   protocol          = "HTTPS"
-  ssl_policy        = "ELBSecurityPolicy-2016-08"
+  ssl_policy        = var.ssl_policy
   certificate_arn   = data.aws_acm_certificate.certificate.arn
 
   default_action {

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -166,6 +166,11 @@ variable "fixed_response_body" {
   default     = "No service configured at this address"
 }
 
+variable "ssl_policy" {
+  description = "TLS policy for https listener"
+  default     = "ELBSecurityPolicy-2016-08"
+}
+
 variable "paramstore_assume_role" {
   description = "assume role when using paramstore"
   default     = ""